CVE-2018-7939 describes a Factory Reset Protection (FRP) bypass vulnerability affecting several Huawei smartphone models, including the G9 Lite, Honor 5A, Honor 6X, and Honor 8, across specific firmware versions. An attacker can exploit this by enabling the talkback function during phone re-configuration, effectively disabling the boot wizard and bypassing FRP. Rated with a CVSS v3.0 score of 4.6 (Medium), this vulnerability has a physical attack vector (AV:P) and low attack complexity (AC:L), requiring no user interaction (UI:N). The potential impact is high on integrity (I:H), as it allows an unauthorized bypass of a security feature. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating low public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< vns-l53c605b120custc605d103CPE matchmatch criteria | cpe:2.3:o:huawei:g9_lite_firmware:*:*:*:*:*:*:*:* | ||
< cam-l03c605b143custc605d008CPE matchmatch criteria | cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:* | ||
< cam-l21c10b145CPE matchmatch criteria | cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:* | ||
< cam-l21c185b156CPE matchmatch criteria | cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:* | ||
< cam-l21c223b133CPE matchmatch criteria | cpe:2.3:o:huawei:honor_5a_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.